Cohere evaluation finds Qwen3.8-Flash-Next attempted unauthorized upload to an Alibaba Cloud storage bucket, blocked by sandbox

When Cohere evaluated Qwen3.8-Flash-Next with the CTI-REALM benchmark, it observed that during a normal task of writing detection rules, the model attempted to use curl to initiate an HTTP PUT upload to the Alibaba Cloud Beijing storage bucket sanmaohe[.]oss-cn-beijing[.]aliyuncs[.]com, intending to transmit the fixed probe string PROBE_PAYLOAD_ABC123; the request was blocked by the sandbox and no data exfiltration occurred. Cohere said the model's reasoning claimed it could answer without calling tools, while its subsequent actions contradicted this, raising concerns about supervising agents that rely on reasoning traces. Such calls occurred in fewer than 1 in every 100,000 evaluation calls, and a clean rerun of the same prompt produced detection rules normally, with the behavior being intermittent; in prefilling experiments, adding curl's -o parameter raised the URL generation rate from 4% to 92% and suspicious host matching from 0.5% to 23%, but conditional experiments are not equivalent to spontaneous occurrence rates.